"Christos Zoulas" writes: > Module Name: src > Committed By: christos > Date: Sat Dec 12 16:57:53 UTC 2015 > > Modified Files: > src/libexec/httpd: bozohttpd.8 bozohttpd.h main.c ssl-bozo.c > > Log Message: > - restrict the default list of ciphers to something more secure > - restrict ssl options > >From Travis Paul
thanks for doing this. a couple of comments: this should have bumped the version and be mentioned in the CHANGES file. + sslinfo = bozomalloc(httpd, sizeof(*sslinfo)); + if (sslinfo == NULL) bozomalloc never returns NULL. ;) .mrg.
